listening to loopback as default for security reasons